This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json) Hash identifier: gu/t9WeEpf/u64ey0rZriugYujespm/63kDpzXO91fs= Subject key identifier: 3F:AF:27:98:D1:DB:2F:80:67:8E:C0:85:5B:51:75:D8:9B:8A:DB:DE Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a Certificate serial: 019AF0BFA0CC2EA201F6B9511365F7373DFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 23:01:21 +0000 Manifest this update: Fri 05 Dec 2025 23:01:21 +0000 Manifest next update: Sat 06 Dec 2025 23:01:21 +0000 Files and hashes: 1: HKNH5qVY82EVhwf41jFwu0WLXWQ.roa (hash: lq97v+q7hVfTasgsk/QjtVrEG9iM12Kuyq3A6kQDZ7s=) 2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: FJ6EuMnu0ImJblu4OyRBWfFsy35jTpKhSiyjN0tQ54I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:a0:cc:2e:a2:01:f6:b9:51:13:65:f7:37:3d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a Validity Not Before: Dec 5 23:01:21 2025 GMT Not After : Dec 6 23:01:21 2025 GMT Subject: CN=3faf2798d1db2f80678ec0855b5175d89b8adbde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0b:5a:a0:7a:52:f1:c7:ea:0b:91:c3:73:05: 92:d4:5b:f6:f4:59:9d:0d:d8:02:fc:f0:90:fd:a0: 4b:35:49:6c:02:76:63:b5:61:6a:41:99:5c:ee:be: 2d:70:f0:39:96:3a:97:96:ca:a4:b6:32:f7:3b:b2: 02:84:7c:cf:ac:0c:6b:e4:5e:20:f1:cd:94:77:6a: f2:52:01:13:61:ea:00:ab:ca:5b:35:f3:51:b7:0d: 9a:3b:36:79:05:ad:87:9f:9d:00:96:3e:83:1d:9d: 8d:c8:3b:f4:0b:87:23:46:2e:63:8c:78:5f:c1:56: e6:f5:ed:fc:89:2e:3b:2e:3d:94:4c:48:56:23:7a: 5b:1e:ca:02:2f:61:a0:c5:d4:0c:c0:c1:7b:93:1d: 16:fa:27:de:90:95:b1:35:b2:c5:80:46:44:f8:b2: 93:3c:58:42:a7:35:82:ad:ba:e8:d7:ed:b5:39:87: c7:79:1f:d9:a8:66:11:99:c6:8c:fd:b8:c1:d2:ec: 49:ec:21:7a:4a:95:04:56:d2:39:26:aa:4f:03:ce: d2:6b:89:49:b5:56:aa:29:1c:85:ed:bc:4c:94:be: f3:85:24:54:13:27:ab:b6:66:8d:92:ed:28:a8:ab: 4a:a5:99:d1:49:8b:84:af:8c:73:f4:ae:01:40:d3: 54:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AF:27:98:D1:DB:2F:80:67:8E:C0:85:5B:51:75:D8:9B:8A:DB:DE X509v3 Authority Key Identifier: keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:41:cf:be:ca:99:d3:ac:c3:8d:db:d9:5f:fb:86:9d:92:46: 8d:f5:71:d7:a9:9a:cc:4d:3c:f1:0c:77:cf:70:5a:6f:7b:94: b4:4a:25:a1:37:4f:1c:81:03:9f:c8:53:c3:9d:df:21:e5:ca: d2:58:e3:20:a2:9c:0b:c9:54:67:17:c4:a7:47:94:0d:3d:2f: 5f:48:b2:99:f0:25:e4:24:f5:fa:79:f8:c0:09:dd:4b:c9:f0: dc:31:61:00:f1:51:9b:94:ff:fd:36:ec:a7:72:22:52:a2:be: c3:44:f9:c1:1c:10:79:94:f0:72:4b:e9:c3:12:c2:ee:54:8b: e0:9b:8e:7a:b9:9c:d5:ba:d9:55:ec:2d:81:b2:be:85:10:41: ac:cf:1a:bc:7a:93:8d:6f:f4:9e:f5:2a:58:41:cc:1e:4c:2f: 10:cd:1b:47:ff:06:a0:42:9a:05:92:52:d4:b7:1b:49:44:56: c1:aa:8f:f9:a5:08:b6:c3:48:f6:c1:4b:dd:d2:b5:63:cc:83: 1a:8d:87:22:8b:6a:91:98:fc:ec:4c:e3:2a:42:3a:9a:f8:82: 2f:16:ec:f7:c0:38:93:71:92:b4:df:9d:c5:9a:c3:c5:89:1c: 25:ca:e8:a4:2e:e1:43:a2:88:98:65:85:7e:89:a6:39:42:43: 4a:7f:d9:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv6DMLqIB9rlRE2X3Nz38MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYzVmY2U3N2RkZTRlMmVlNGZkNjUzNTEwMDUyOWMyZjQ0 NGQ3OWEwHhcNMjUxMjA1MjMwMTIxWhcNMjUxMjA2MjMwMTIxWjAzMTEwLwYDVQQD EygzZmFmMjc5OGQxZGIyZjgwNjc4ZWMwODU1YjUxNzVkODliOGFkYmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AtaoHpS8cfqC5HDcwWS1Fv29Fmd DdgC/PCQ/aBLNUlsAnZjtWFqQZlc7r4tcPA5ljqXlsqktjL3O7IChHzPrAxr5F4g 8c2Ud2ryUgETYeoAq8pbNfNRtw2aOzZ5Ba2Hn50Alj6DHZ2NyDv0C4cjRi5jjHhf wVbm9e38iS47Lj2UTEhWI3pbHsoCL2GgxdQMwMF7kx0W+ifekJWxNbLFgEZE+LKT PFhCpzWCrbro1+21OYfHeR/ZqGYRmcaM/bjB0uxJ7CF6SpUEVtI5JqpPA87Sa4lJ tVaqKRyF7bxMlL7zhSRUEyertmaNku0oqKtKpZnRSYuEr4xz9K4BQNNUMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+vJ5jR2y+AZ47AhVtRddibitveMB8GA1UdIwQY MBaAFGLF/Od93k4u5P1lNRAFKcL0RNeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQt YWY2YmU5MDU3OTlkLzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQtYWY2YmU5MDU3OTlk LzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkHPvsqZ 06zDjdvZX/uGnZJGjfVx16mazE088Qx3z3Bab3uUtEoloTdPHIEDn8hTw53fIeXK 0ljjIKKcC8lUZxfEp0eUDT0vX0iymfAl5CT1+nn4wAndS8nw3DFhAPFRm5T//Tbs p3IiUqK+w0T5wRwQeZTwckvpwxLC7lSL4JuOermc1brZVewtgbK+hRBBrM8avHqT jW/0nvUqWEHMHkwvEM0bR/8GoEKaBZJS1LcbSURWwaqP+aUItsNI9sFL3dK1Y8yD Go2HIotqkZj87EzjKkI6mviCLxbs98A4k3GStN+dxZrDxYkcJcropC7hQ6KImGWF fommOUJDSn/Zaw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:48 2025 by rpki-client